Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: r83Skf/8k6lcc9V1cBsJB06VgL5gaE4I1j8BkkPpjEY=
Subject key identifier: 34:91:22:C0:92:91:71:B3:BE:74:AC:51:38:49:AD:10:62:35:89:7E
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019A4E868673BCC144CC6E13D4CFA5ED2652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 0CE2
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: ISP7AwV7T2uPChZASc5YrPiTlkk.roa (hash: oFTsPiIdNPqfQz+HEt0vWKZqmx2ZRwTaVu/Xdt0P09Q=)
2: OqtJcNmb1J50tLIWF6D7y01VxA4.roa (hash: 1ov/KhQ3AFXvHLspCojYHQyYdAVdY1WazSh2AhXG8Y8=)
3: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: AQVQHUsm63H07yzhl5R0A9dMltLJcJqMu3yxt2d+KUY=)
4: _tDDtYeC4guX6wO-zUHsidoSz_E.roa (hash: 8nbY0JFVrWrDRZsP3hnIFWTN85PCkZ4W8FZDcNxDifM=)
5: atNz0WdRnHANtOvahe4tYSXD9RA.roa (hash: NRl5RKkOXSKEcAEWPD0OwEYwTxLnIvplSR5oJx7Nj0w=)
6: knqD2Ha_mIK6TeaUs6rdEtXjm7Y.roa (hash: IG4vqFBPbvWgHsxQujBWqMW5v3cVtaifoxJ+vZ5e8BU=)
7: t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa (hash: I2z+OvE8dHq8WvzVKbss4tbH6KggeV9GWqIKnOXdtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:86:73:bc:c1:44:cc:6e:13:d4:cf:a5:ed:26:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=349122c0929171b3be74ac513849ad106235897e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:3c:2c:16:d7:0e:a2:e3:49:4b:13:73:a1:
16:58:00:d6:5c:8f:58:e2:3f:fc:2c:65:45:ea:9c:
d2:60:bb:cc:5d:15:6d:76:d4:bf:60:0d:02:17:2a:
bf:7c:19:96:39:3e:a6:50:4c:e1:8c:9e:b5:38:87:
cf:6c:96:fd:30:08:d8:6a:18:d0:a5:5d:b7:f2:36:
18:a6:0c:ec:66:0d:8f:fe:cb:9a:76:33:55:94:20:
eb:b1:8e:e0:52:9f:73:03:92:f0:77:1d:f4:4b:c6:
ab:72:0a:21:3f:c6:b1:70:27:a9:29:37:b3:6d:08:
3c:80:e8:07:bb:be:e0:c5:c9:5b:ec:bf:53:e9:d3:
cf:b6:ce:80:3c:d7:61:33:be:25:f4:0e:f5:54:2f:
b2:d4:07:10:29:e7:10:7a:14:28:9e:0d:ca:cc:2a:
94:a6:f5:e7:eb:e4:4c:70:e2:c6:58:97:52:26:e1:
cb:21:7d:b7:15:1e:18:f9:a9:be:21:5e:3a:e1:9e:
b3:a6:da:f1:66:8f:91:cf:c0:02:fb:3e:17:81:e2:
06:bf:8a:21:e0:11:79:2d:b9:c5:ac:62:8f:95:3d:
64:f4:df:32:2b:66:44:fe:62:2d:b5:ee:37:14:af:
d5:8d:98:da:86:ef:d0:0e:34:f9:9f:57:ec:ec:97:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:22:C0:92:91:71:B3:BE:74:AC:51:38:49:AD:10:62:35:89:7E
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b2:c6:47:96:af:d5:03:87:e2:60:98:9c:0d:32:86:18:c7:
13:ae:be:c7:7f:bf:99:3d:4d:94:c2:37:99:00:be:e9:28:74:
2a:b6:27:3f:7a:0c:10:a1:12:c0:8b:99:fe:4f:2d:e9:20:a1:
59:a1:f8:7a:d5:82:ac:ab:44:b1:3c:5d:7a:2a:24:bc:9a:d6:
9e:55:ab:54:33:d4:d6:e1:98:fb:c8:49:a1:10:00:45:9e:6a:
0a:79:9e:98:be:94:78:8e:3a:55:d0:36:c5:0f:ba:d0:da:53:
f0:09:e6:31:9b:3f:e2:ad:bd:75:49:00:4f:04:ee:b5:0c:84:
24:ab:a7:ee:dd:46:83:d9:ce:e8:41:e1:b5:a2:78:c4:2b:87:
01:b8:ab:d4:9b:19:85:98:90:26:4b:24:8c:5a:ff:a2:19:73:
44:80:98:a1:e7:d6:41:9b:cf:85:b8:74:62:7e:5d:25:a8:ed:
26:64:bc:51:3c:30:a2:c2:29:9e:db:c8:b0:7e:c2:ed:d9:37:
d7:fb:90:a3:f4:18:86:9f:2e:81:25:d5:eb:50:7c:ec:4c:6d:
3c:f1:04:ff:67:6e:e1:95:71:39:c7:69:05:64:c6:0e:3d:e6:
e2:46:a4:75:c9:5f:03:43:7a:a3:15:4b:bf:f6:37:e6:f6:5d:
7f:b0:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:21 2025 by rpki-client